forgejo-mcp/operation/repo
Byte Flavour 4969ee5881
feat: robust stateless auth with security fixes and improved tests
This commit addresses the review feedback on PR #138:
- Fixed a privilege escalation vulnerability where failed ephemeral client
  creation would silently fall back to the global singleton token.
- Refactored forgejo.Client(ctx) to return (*forgejo.Client, error).
- Updated all 100+ tool handlers to properly handle client initialization errors.
- Improved token extraction to handle schemes (token/bearer) case-insensitively.
- Enhanced Unit Tests (pkg/forgejo/forgejo_test.go) to verify that different
  concurrent requests with different tokens correctly use their respective
  tokens in the Authorization header.
- Updated README and demos to reflect case-insensitivity support.
2026-05-24 13:44:48 +02:00
..
branch.go feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
commit.go feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
contents.go feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
contents_test.go feat: add list_repo_contents and get_repo_tree MCP tools 2026-05-05 18:49:22 +00:00
file.go feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00
file_test.go feat: bounded responses for get_pull_request_diff + get_file_content (#131) 2026-05-12 10:41:52 +02:00
repo.go feat: robust stateless auth with security fixes and improved tests 2026-05-24 13:44:48 +02:00